IBM Heap Analyser -
I started getting "Java.lang.OutofMemoryError: Java heap space" when trying to read a heapdump file using the heap analyser. used the below on a windows 2008r2 server where I had 64bit java installed. specified the initial and max heapsize and it started working.
D:\Program Files\Java\jdk1.7.0_25\bin>java -Xms2g -Xmx6g -jar d:\temp\ha450.jar
Friday, September 27, 2013
Tuesday, February 12, 2013
Siteminder r6 - separate keystore from policy store
We have r6sp5 siteminder environment which we are looking to parallel upgrade to r12sp3 soon. below are some detailed steps how to separate the KeyStore from the policy store in a r6sp5 environment. The siteminder documentation is very vague in its description of how to do this.
***************
1.Take the backup of existing keys for the policy server:
smobjexport.exe -dsiteminder -wP@55word -okey.smdif -x -v
2. Create a new LDAP Key Store instance in your directory server.
3. Now open the Siteminder smconsole and go to the data tab-> Select Key Store, then uncheck the option-Use Policy Store Database. And fill the details for your newly created Keystore (like IP: Port, username, password and root DN) in this Keystore tab. After this click OK.
4. Open Command Prompt, go to/bin and perform the following command :-
smldapsetup ldgen -fnewkeystoreschema.txt -v -k1
This will create a schema file for your new keystore instance
6. Also at the same location run the following command :-
smldapsetup ldmod -fnewkeystoreschema.txt -v -k1
This will create the Schema in your New LDAP keystore from this schema file
7. run
smobjimport.exe -dsiteminder -wP@55word -ikey.smdif -k -v
8. Now we are done with the creation of new keystore. Start the policy server and check the logs.
*****************
***************
1.Take the backup of existing keys for the policy server:
smobjexport.exe -dsiteminder -wP@55word -okey.smdif -x -v
2. Create a new LDAP Key Store instance in your directory server.
3. Now open the Siteminder smconsole and go to the data tab-> Select Key Store, then uncheck the option-Use Policy Store Database. And fill the details for your newly created Keystore (like IP: Port, username, password and root DN) in this Keystore tab. After this click OK.
4. Open Command Prompt, go to
smldapsetup ldgen -fnewkeystoreschema.txt -v -k1
This will create a schema file for your new keystore instance
6. Also at the same location run the following command :-
smldapsetup ldmod -fnewkeystoreschema.txt -v -k1
This will create the Schema in your New LDAP keystore from this schema file
7. run
smobjimport.exe -dsiteminder -wP@55word -ikey.smdif -k -v
8. Now we are done with the creation of new keystore. Start the policy server and check the logs.
*****************
Subscribe to:
Posts (Atom)